mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 19:36:33 +00:00
Add comprehensive OWASP Top 10 directory structure with injection payloads
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
@@ -0,0 +1,14 @@
|
||||
# A08 - Software and Data Integrity Failures
|
||||
|
||||
## Description
|
||||
This relates to code and infrastructure that does not protect against integrity violations. This includes insecure deserialization, insecure CI/CD pipelines, and applications that rely on updates, plugins, or libraries from untrusted sources without integrity verification.
|
||||
|
||||
## Common Vulnerabilities
|
||||
- Insecure deserialization
|
||||
- Unverified software updates
|
||||
- Insecure CI/CD pipelines
|
||||
- Unsigned code execution
|
||||
- Missing integrity checks
|
||||
|
||||
## Testing Approach
|
||||
Test for deserialization vulnerabilities, analyze update mechanisms, check code signing, and verify integrity checks.
|
||||
Reference in New Issue
Block a user